Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
File: 3136382e39302e38382e302f32322d3332203d3e20323635323639.roa (raw, json)
Hash identifier: YLc6+FVlA9RO9QChMzNGrgHl9nfZacLS7k/7AYln/6s=
Subject key identifier: 96:41:F7:A9:A3:D5:8E:E6:CA:F1:7F:94:FE:87:6E:57:EA:78:CC:40
Certificate issuer: /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Certificate serial: 14BD0EFF5EE14EE22CAD225B5EB419D9F93403BB
Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
Signing time: Thu 12 Dec 2024 17:26:13 +0000
ROA not before: Thu 12 Dec 2024 17:21:13 +0000
ROA not after: Thu 11 Dec 2025 17:26:13 +0000
asID: 265269
IP address blocks: 168.90.88.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bd:0e:ff:5e:e1:4e:e2:2c:ad:22:5b:5e:b4:19:d9:f9:34:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Validity
Not Before: Dec 12 17:21:13 2024 GMT
Not After : Dec 11 17:26:13 2025 GMT
Subject: CN=9641F7A9A3D58EE6CAF17F94FE876E57EA78CC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:92:56:13:14:e5:ee:36:d9:5f:2c:93:14:
f2:59:63:20:14:67:ff:51:88:b5:e2:1c:82:7e:82:
01:77:c2:0f:7b:a3:66:c2:5f:50:b5:92:0d:a8:7d:
c0:5a:7a:e7:d0:7c:f0:b5:5d:8c:bb:cb:5f:8e:7f:
f5:ea:5e:ff:82:c6:ee:7e:78:a8:43:d8:1b:a6:3a:
85:31:37:bf:f5:77:69:8e:75:be:58:88:b2:2a:7a:
f4:f8:b3:0f:21:c7:c6:d1:02:ff:d2:4d:cc:e4:3b:
12:0d:68:ba:f7:7f:40:2b:1c:18:89:84:fe:19:3b:
dd:04:58:49:ac:8b:a7:69:2a:54:64:09:d3:56:e6:
1c:6c:93:fb:56:d1:5f:1b:1c:9a:56:9d:ba:a3:07:
04:44:d6:c1:0d:89:b5:16:df:a3:d9:d0:a1:f3:78:
5b:a8:44:21:e8:ef:cc:db:ba:e1:28:43:32:08:92:
61:e1:3a:1a:96:8c:2e:86:d4:fe:37:bc:2b:4a:60:
0c:7d:a1:1e:a5:34:af:37:b3:d8:58:05:bb:b1:8c:
59:a8:91:f9:f5:29:0f:a8:57:b9:1c:b9:ae:80:7d:
a1:7c:9a:86:e7:fa:81:e7:a7:f6:ab:8d:d7:30:03:
4f:e2:d0:c6:f1:54:0d:44:87:06:10:d9:17:dd:49:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:41:F7:A9:A3:D5:8E:E6:CA:F1:7F:94:FE:87:6E:57:EA:78:CC:40
X509v3 Authority Key Identifier:
keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:32:97:f6:a9:b8:63:5b:98:b9:d6:8d:aa:59:21:33:94:ac:
fe:50:3c:84:89:49:f5:d1:77:cd:46:e1:0a:f8:27:94:16:b5:
73:ae:e0:ea:6d:bd:52:7b:5d:8b:6c:07:a1:78:78:ea:a9:2a:
97:26:98:5e:73:f7:61:82:2f:9f:4b:6b:83:2e:01:55:79:3a:
74:c6:9b:22:f8:fe:a1:12:b8:f6:6e:6a:95:d1:36:e8:0c:36:
58:21:f1:3e:0d:ae:70:1b:9e:33:7d:e2:95:94:f2:fa:ad:1e:
34:a0:5b:f5:b7:df:42:de:a9:0c:66:79:b9:01:36:25:25:44:
14:d0:3f:de:d7:a3:a4:37:c4:bb:f8:a5:3b:b9:a4:53:56:99:
a9:c4:55:65:18:62:6a:14:20:3f:7c:a1:d5:c4:5f:e8:49:f5:
11:bb:60:e6:89:2e:52:28:3c:92:09:cf:a0:7a:fa:b7:fa:b7:
10:07:d5:66:8d:2f:db:4f:9c:8a:e2:0f:e9:e2:11:e3:97:c5:
62:f8:8c:dd:35:d1:c1:d0:91:7d:c1:de:16:47:a5:e5:24:ba:
0a:27:26:c6:9d:03:32:08:2b:96:28:c2:19:84:63:4c:c5:16:
23:cc:90:e9:16:d4:75:ff:bb:04:44:3a:fc:bc:b1:0a:73:a0:
78:b7:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:42:54 2025 by rpki-client